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It's  time  t o  move  to  the  future 

. 

with  the  hardware  you've  got. 

f 

When  moving  to  VoIP,  ripping  and 
replacing  used  to  be  the  only  way.  Now, 
it's  the  out-of-date  way.  That's  because 
it's  no  longer  about  hardware. 

It's  actually  about  software. 

Now  you  can  keep  your  hardware— 
your  PBX,  your  gateways,  even  your 
phones.  Simply  move  to  VoIP  with 
software.  Software  that  integrates  with 
Active  Directory^  MicrosoffOffice, 
Microsoft  Exchange  Server,  and  your  PB) 

Maximize  your  current  PBX 
investment  and  make  it  part  of  your 
new  software-based  VoIP  solution 
from  Microsoft.  You're  much  closer  to 
VoIP  than  you  realize.  Leam  more  at 
microsoft.com/voip 


Innovations  by  InterSystems 


Make 

Applications 
More 
Valuable 
* 


■  EDITOR’S  NOTE 

Don  Tennant 


Official  Response 


WANT  TO  get  the  attention  of  the  editor  in 

chief?  Try  making  this  comment  in  response 
to  a  story  on  our  Web  site:  “Computerworld  is 
becoming  increasingly  schizophrenic  in  its 
focus.”  It’ll  work  every  time. 

es  geared  for  end  users. 


Before  I  get  into  the 
context  of  the  comment, 
let’s  consider  what  that 
focus  is  supposed  to  be. 
Prior  to  the  rebirth  of  our 
print  edition  as  a  maga¬ 
zine  earlier  this  month, 
our  focus  was  embla¬ 
zoned  on  the  front  of 
every  issue  in  the  form  of 
our  tag  line:  “The  Voice 
of  IT  Management.”  That 
means  we  promote  the 
interests  of  senior  IT 
managers.  We  facilitate 
information-sharing 
among  them.  We  ask  the 
hard  questions  of  vendors 
that  our  readers  would 
ask.  We  serve  as  their  ad¬ 
vocate  in  helping  to  solve 
the  technology  and  man¬ 
agement  problems  that 
confront  them  every  day. 

For  the  magazine,  we 
preferred  the  sleeker,  less 
cluttered  look  without 
the  tag  line.  But  make 
no  mistake:  The  focus 


Computerworld  is,  first 
and  foremost,  an  online 
media  company.  Online, 
we’re  able  to  deliver  ev¬ 
erything  we  deliver  in 
print,  yet  we’re  also  able 
to  engage  a  much  broader 
readership,  including  not 
only  senior  IT  managers, 
but  also  IT  professionals 
of  all  sorts  and  even  work¬ 
ers  outside  the  profession 
who  are  IT  enthusiasts. 

That  brings  us  to  our 
reader’s  “schizophrenic” 
assertion.  The  comment 
was  in  response  to  a  story 
posted  on  July  23:  “Your 
Boss  Is  Spying  on  You 
Right  Now.  What  Can 
You  Do  About  It?”  The 
article  looks  at  ways  to 
work  around  the  moni¬ 
toring  of  employees’  on¬ 
line  activity. 

This  reader  went  on  to 
say  that  there's  nothing 
wrong  with  providing  sto- 


“However,”  he  wrote,  “if 
Computerworld  is  going 
to . . .  remain  a  premier 
source  for  business  com¬ 
puting  information,  even 
its  articles  for  users  need 
to  be  written  with  an  eye 
toward  the  requirements 
of  business  IT.  Computer- 
world  should  never  pub¬ 
lish  any  article  likely  to 
make  it  harder  for  an  IT 
department  to  do  its  job.” 

Other  readers  ex¬ 
pressed  similar  views.  “I 
thought  that  Computer- 
world  was  [supposed] 
to  make  administrators’ 
jobs  easier  and  that  we’d 
be  more  informed,"  one 
wrote.  “What  this  article 
spouts  are  ways  to  get 
around  the  very  systems 
and  people  the  publica¬ 
tion  is  targeted  towards.” 

“Do  the  editors  read 
these  comments?”  anoth¬ 
er  reader  asked.  “It  seems 


is  unchanged,  and  we 
have  in  fact  rededicated 
ourselves  to  ensuring 
that  the  magazine  truly 
speaks  on  behalf  of  se¬ 
nior  IT  management. 

But  what  needs  to  be 
recognized  here  is  that 


■  But  what  needs 
to  be  recognized 
here  is  that 
ComputenamrU  h, 
first  and  foremost. 


rather  overwhelming  so 
far  that  readers  are  un¬ 
happy  with  the  direction 
this  article  took  on  this 
issue.  Will  there  be  some 
kind  of  official  response 
from  Computerworld!" 

Yes.  But  first,  let  me 
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offer  an  observation. 

This  article  was  the  top- 
read  story  on  our  site  the 
day  it  was  posted,  and  it 
reached  No.  4  the  next 
day.  It  sparked  a  lively, 
well-informed,  well- 
articulated  discussion.  At 
this  writing,  it  has  drawn 
42  reader  comments  and 
107  recommendations. 

Those  numbers  tell  me 
that  online  readers  had 
a  great  deal  of  interest  in 
this  story.  The  interest  of 
some  of  them  no  doubt 
lay  in  a  desire  to  beat  the 
system  at  work.  Others 
suggested  that  the  solu¬ 
tion  to  employee  monitor¬ 
ing  is,  as  one  reader  put 
it,  to  “just  work  at  work 
instead  of  stealing  time 
and  resources.”  Still  oth¬ 
ers  found  that  the  story 
provided  needed  am¬ 
munition:  “Articles  like 
this,  especially  if  you’re 
in  the  IT  industry,  should 
almost  be  embraced,”  one 
reader  wrote.  “Add  this 
kind  of  thing  to  your  arse¬ 
nal  for  detection  of  people 
going  outside  company 
policy,  rather  than  whin¬ 
ing  that  it's  not  something 
that  should  be  written.” 

So  here's  my  official 
response:  When  we've 
engaged  our  readers  as 
effectively  as  this  story 
has,  we’ve  done  our  job.  ■ 
Don  Tamant  is  editor  in 
chief  of  Computerworld. 
Contact  him  at  don_ 
tennant@computerworld. 


The  more  you  have  to  store, 
the  more  reliability  matters. 

Fujitsu  ETERNUS  Storage  Systems:  Uncompromising 
reliability  for'your  most  demanding  applications. 


To  help  enterprises  manage  the  flood  of  mission-critical  data,  Fujitsu  ETERNUS  Storage  Systems  deliver  the 
reliability  and  availability  data  centers  require.  For  continuous  data  access  and  easier  maintenance,  major 
components  are  highly  redundant  and  hot-swappable.  The  controller  modules’  software  can  also  be  upgraded 
without  shutting  down  or  rebooting.  A  built-in  statistical  failover  mechanism  ensures  stable  operation  by  disabling 
components  exhibiting  intermittent  failures.  Furthermore,  disk  data  encryption  using  128-bit  AES  provides  security 
against  data  theft.  Go  to  us.fujrtsu.com/computers/reliability3  for  more  information. 


DATA  PROTECTION— Online,  efficient  disk-tg-disk  DISASTER  RECOVERY— Cost-effective,  secure 


FUJITSU 

THE  POSSIBILITIES  ARE  INFINITE 


■  LETTERS 


Squirrels  don’t  remember  where  they  hide  their  nuts. 


They're  not  looking  in  the  right  places  for  what  they  need. 

But  you  can  With  proven  information  management  software  from  SAS. 

www.sas.com/squirrels 


QPI  Q  POWER 
vJUlvJ  TO  KNOV 


THE  WEEK  AHEAD 

MONDAY:  Sun  Microsystems  is  scheduled  to  report  its 
financial  results  for  the  latest  quarter,  followed  by  EDS 


where  the  Black  Hat  briefings  end  and  run  through  Sunday. 


second,  according  to  a  story 
published  July  18  by  Net¬ 
work  World,  a  sister  publica¬ 
tion  of  Computerworld. 

At  first,  Duke  officials 
blamed  the  iPhone,  which 
was  being  used  by  about 
ISO  people  on  campus.  IT 
administrators  at  the  school 
thought  that  the  device’s 


STIL  Group 
Gets  "Clear 
Evidence’ of 


Vote  Fraud 


AT  LEAST  13  fraudulent 


election  held  last  fall  by  the 
IT  Service  Management  Fo¬ 
rum's  U.S.  chapter,  according 
to  a  preliminary  finding  by 
consulting  firm  Kroll  Inc. 


Duke’s  WLAN  Woes 
Lead  to  Cisco  Patch 


a  now  says  that  soft 

I  widely  publicized  dres 

*  problems  with  trafl 


Futhey  added  that  there 
had  been  no  recurrences  of 
the  network  problems  since 
Duke  had  installed  a  fix  pro¬ 
vided  by  Cisco. 

Duke,  Cisco  and  Apple 
have  all  remained  mum 


Pasadena,  Calif.-based  back 
er  of  the  IT  Infrastructure 
Library  standards  now  has 


USA  officials  don’t  think 
there  were  enough  ille¬ 
gitimate  ones  to  change  the 
results.  But  Palmer  said  the 
group  may  decide  to  hold  a 


■  NEWS  DIGEST 


GAO:  Treasury  Dept. 
Needs  More  Eyes  on  IT 

One  out  of  every  four  dollars  ;  between  the  agency's  IT  and 

spent  by  the  U.S.  Department  ;  business  managers  on  pro¬ 
of  the  Treasury  goes  to  IT.  But  ;  posed  technology  investments. 

‘  1  The  GAO  looked  at  the  Trea- 

|  sury  Department  through  the 
|  lens  of  the  Information  Technol- 
cordingtoareportbytheGov-  ;  ogy  Investment  Management 
emment  Accountability  Office.  I  framework,  a  five-stage  “matu- 
|  ritymodeT  that  the  GAO  created 
!  for  use  by  federal  agencies. 


The  Treasury  Department  is 
somewhere  between  Stages  2 
and  3  of  ITIM.  having  complet- 


a  process  designed  to  help  it 
identify  IT  projects  that  should 
receive  additional  oversight. 


with  executives  from  IT  and  its 


final  decisions  on  proposed  IT 
projects,  the  GAO  said. 

David  Powner,  the  GAO'S 
director  of  IT  management 
issues,  said  he  isn't  aware  of 
any  federal  agencies  that  have 
reached  Stage  5  of  the  ITIM 
model.  If  an  organization  gets 
to  Stage  3.  he  said,  “they  are 
fairly  mature  at  that  point" 

-  PATRICK  THIBODEAU 


10  COMPUTERWORLD  JULY  30. 2007 


■  NEWS  DIGEST 


Audit  Slaps  VA 
On  Lost  IT  Gear 


GAO,  said  at  the  hearing 
that  there  is  an  “overall 
lack  of  accountability”  for 
IT  equipment  among  em¬ 
ployees  at  the  audited  VA 
facilities.  “Missing  IT  item 
were  not  reported  for  sev¬ 
eral  months,  and  in  some 


Short 

lakes 


be  accounted  for  dur¬ 
ing  inventory  counts 
conducted  by  officials 
at  the  four  facilities  in 
fiscal  2005  and  2006, 
according  to  a  report 
released  last  week  by 


Inadequate  Controls 
over  IT  Equipment  at 
Selected  VA  Locations 
Pose  Continuing  Risk 
of  Theft,  Loss,  and  . 
Misappropriation^^ 


congressional  hearing  held  Howard,  who 


Based  on  updated  informa-  GAO  officials  a 


tion  obtained  from  those 
locations  earlier  this  year, 
they  couldn’t  account  for 
more  than  8,600  pieces  of 


the  VA’s  inventory  control 
weaknesses  are  putting  IT 
equipment  at  risk  of  being 
lost  or  stolen  and  posing  a 


agement  consultant  Tyrone 
Hom'd  that  ran  In  the '40 
Linder  40"  section  ol  the  July 
9  issue.  DeVry  University's 
Keller  Graduate  School  of 

identified  as  being  pari  of  the 
University  of  Phoenix.  Howard 


OVERSIGHT 

GAO:  Treasury  Dept. 
Needs  More  Eyes  on  FT 

mim 

;  But  it  still  needs  to  establish 
|  an  investment  review  board. 

1  operating  units,  to  make  the 

One  out  o(  every  four  (Man 
spent  by  the  U.S.  Department 
of  the  Treasury  goes  to  IT.  But 

between  the  agency’s  FT  and 
business  managers  on  pro- 

The  Treasury  Department  is 
somewhere  between  Stages  2 
and  3  of  ITIM,  having  complet- 

'<  protects,  the  GAO  said. 

;  David  Pawner,  the  GAO’s 

its  $2.8  bHon  IT  budget  has 

The  GAO  looked  at  the  Trea¬ 
sury  Department  through  the 
lens  of  the  Information  Technoi- 

ed  some  of  the  process  require¬ 
ments  for  both  of  those  levels, 
the  GAO  said.  For  Instance,  the 

I  issues,  said  he  isn't  aware  of 

1  any  federal  agendas  that  have 
|  reached  Stage  5  of  the  IHM 

ammont  Accountability  Office. 

In  particular,  the  GAO  died  a 
need  to  Improve  coordbiation 

framework,  a  five-stage  "matu¬ 
rity  modeT  that  the  GAO  created 
for  use  by  federal  agendas. 

a  process  designed  to  help  It 
identify  IT  protects  that  should 

!  to  Stage  3,  he  said,  “they  are 

1  fairly  mature  at  that  point' 

-  PATRICK  THIBODEAU 

Barry  Klawans 

B  Open-source  exec  says 
new  vendor  alliance 
puts  focus  on  apps 


among  corporate  users.  Barry  [or] 

Klawans,  an  OSA  board  ing 

member  and  chief  technology  doe 

officer  at  JasperSoft  Corp.,  wit! 

spoke  with  Computerworid  ^ 

at  the  O'Reilly  Open  Source  hea 

Convention  here  last  week.  thal 


Center  to  speed  op  its  devel¬ 
opment  of  online  search  anf 
advertising  technologies. 


foundation  just  because  we 
thought  it  was  fun.  But  they 
were  all  aimed  at  advocating 
for  Linux  or  infrastructure 
[tools].  No  one  was  advocat¬ 
ing  for  [vendors]  that  were 
looking  to  build  applications 
for  the  business  world. 


talked  to  all  the  obvious  peo¬ 
ple  who  are  missing.  Compa¬ 
nies  like  MySQL  are  wanting 


We've  set  up  three  working 
groups  to  address  areas  we 
think  are  problems.  One  of 
them  is  interoperability.  I’ve 
talked  to  a  lot  of  CIOs,  and  it 


>bal , 
patches 


China,  FBI  Bust 
Aleged  Pirates 

LOS  ANKLES- A  flurry  of 


conducted  (ointty  by  the  FBI 
and  China's  Ministry  of  Public 
Security.  Microsoft  said  more 


Infosys  Gets  BPO 
Sites  From  Philips 


Corporate 
Blogs  Take 
On  an  Edge 

Companies  take  a  new  marketing 
tack:  letting  their  bloggers  discuss  a 
range  of  topics.  By  Heather  Havenstein 


launched  its  blog  nine  months  ago, 
are  eschewing  Corporate  Blogging  1.0 
tactics  that  often  result  in  blogs  being 
used  merely  to  post  static  marketing 
materials  as  an  extension  of  compa¬ 
nies’  Web  sites. 

Now,  a  growing  number  of  busi¬ 
nesses  are  opening  up  their  blogs  to 
provide  an  outlet  for  the  same  kind  of 
uncensored  commentary  and  interac¬ 
tion  that  have  made  personal  blogs 
such  a  popular  medium  on  the  Web. 

At  such  companies,  executives  or 
full-time  in-house  bloggers  like  Boyko 
are  writing  posts.  Although  the  goal  is 
still  to  raise  the  profile  of  a  company,  the 
new-style  blogs  often  tackle  unconven¬ 
tional  topics  that  may  not  have  an  obvi¬ 
ous  effect  on  businesses’  bottom  lines. 

For  example,  Pitney  Bowes  Inc.  in 
June  launched  its  first  blog,  featuring 
posts  written  by  Mike  Critelli,  its  ex- 

Continued  on  page  16 


■  WEB  2.0 


BLOGGING  CAN  OPEN  INSIDE  LINES 


IN  ADDITION  to  trying  to 
raise  their  external  vis¬ 
ibility  via  blogging,  some 


For  example,  Keith  Ger- 
son,  PuroSystems  Inc.'s 
president  and  chief  operat- 


the  Tamarac.  Fla.,  com¬ 
ic  insurers  and  property 
"The  blog  seemed  like  it 

come  in  where  people  didn't 
know  me  {and]  be  able  to 
start  working  on  credibility 
and  trust."  Oerson  said.  "It 
was  a  way  for  me  to  share 


to  help  pay  for. 

“It  gave  me  the  unfettered 
opportunity  to  paint  a  por¬ 
trait  for  them  of  what  that 
fund  could  do  for  us,"  he 
said.  "There  was  little  mar¬ 
gin  for  misunderstanding  or 


Rand  Fishkin,  CEO  o 
a  Seattle-based  Internet  marketing 
company  that  helps  its  clients  develop 
blogging  initiatives,  said  that  a  blog 
can  be  a  good  way  for  a  corporation 
to  make  itself  more  "humanlike.”  But. 
he  added,  companies  shouldn’t  even 
attempt  to  blog  if  their  public  relations 
and  legal  teams  don't  agree  to  allow  a 


ant,  potentially  even  issues 
tagonistic  or  troublesome." 
d.  Otherwise,  “you  look 
ridiculous  than  if  you  never 


On  the  Mark 

HOT  TRENDS  ■  NEW  PRODUCT  NEWS  ■  INDUSTRY  BUZZ  BY  MARK  HALL 


over  power  lines  might  bolster  the 
Internet's  infrastructure,  they  aren’t 
silver  bullets,  says  Irving.  Mehlman 
argues  that  telecommunications  and 
cable  companies  need  restructured 
taxes  and  a  more  competitive  climate 
to  induce  them  to  step  up  their  inffa- 


Ubuntu  Live: 

Dog  Pile  on  Microsoft 


devotees  as  a  desktop  operating 
system.  And  Mark  Shuttleworth, 
founder  of  London-based  Canonical 
Ltd.,  the  lead  developer  of  Ubuntu, 
told  the  audience  at  the  Ubuntu  Livt 
conference  in  Portland  last  week  thi 
the  company  will  focus  on  server 


Shift  to  Web  Has  Just  Begun  E™ 

Even  THOUGH  Web  content  is  being  squeezed  in  between  to  find  a  single  criti- 
bigger,  bolder  and,  frankly,  more  annoying  online  advertising,  cal  peep  about  other 
only  6%  of  ad  dollars  go  to  Internet  sites,  according  to  For-  Linux  distributions  *— 

rester  Research  Inc.  But  as  people  continue  to  increase  their  or  even  prideful  remarks  about  why 

Web  time  vs.  other  media,  more  ads  will  shift  to  Web  sites.  ub“ntu  is  ,he  **?,  operating  system. 

Matt  Langie,  director  of  product  marketing  at  WebTrends  Inc.  in  Port-  Rather,  you  could  liken  the  situa- 

land,  Ore.,  says  the  trick  for  Web  marketers  is  to  get  the  biggest  bang  for  0.,.,  °*estant  e  ormation 


But  Can  the  Net 
Take  the  Load? 


VintCerf 

Google’s  chief  Internet  evangelist 
talks  about  the  sorry  state  of  onlin 
security,  his  hopes  lor  deep  space 
communication  and  using  IT  to 
find  saffron  in  the  wilderness. 


be  academic  and  military. 

The  commercial  incarnation  didn't 
really  happen  until  1989,  which  makes 
the  Internet  18  years  old.  It’s  had  an 
awkward  [adolescence].  It  still  isn’t 
quite  clear  how  it’s  going  to  fit  into 
the  world.  It’s  boundaryless  in  many 
respects,  so  both  good  things  and  bad 
things  manifest.  I’m  very  impressed  by 
the  quantity  and  quality  of  content  on 
the  Net,  [but]  there's  some  pretty  bad 
content  as  well. 


Congratulations.  Your  IT  security  is  working  hard.  But  there’s  something  more  it  should  do  (besides  the  protection,  compliance, 
access,  etc.).  IT  security  should  actually  make  your  business  more  efficient.  More  flexible.  More  competitive.  CA  can  help.  Our 
Security  Management  centralizes  your  identity  and  access  management  to  turn  IT  security  into  a  proactive,  business-building 
tool.  So  your  security  strengthens  customer  relationships,  grows  partnerships  and  helps  your  enterprise  address  changing 
markets  with  ninja-like  agility.  All  with  CA’s  best-in-class  modularity,  scalability  and  integration.  But  don't  just  take  our  acronym 
for  it.  Download  the  white  paper,  "Security  Management:  Aligning  Security  with  Business  Opportunities,"  at  ca.com/secure. 


■  THE  GRILL  !  VINT  CERF 


M  M  Internet 

■  ■  security  is 

■  ■really  not  in 
great  shape  right  now. 
There  are  many  av¬ 
enues  of  attack  avail¬ 
able  to  people  who 
want  to  cause  trouble. 


Continued  from  page  20 
sonal  use  of  the  Internet  is  heavily  o 
ented  toward  finding  information,  ai 
I’m  just  astonished  by  the  informatii 


I  thought,  “By  God!  I  can’t  believe  what  risk  and  vulnerability  that  worries  me 
we  just  did!"  a  great  deal.  If  we  can’t  do  a  great  job, 

people  will  be  less  comfortable  using 

How  has  the  Internet  affected  mobility  the  Net  and  computers, 

and  vice  vena?  If  you  know  you’ll  have 

access  wherever  you  go,  you  change  You've  been  married  to  your  wife.  Sigrid, 

some  of  your  habits.  I’m  an  avid  laptop  for  more  than  40  years.  You  also  have 
user,  and  I  just  spent  two  weeks  with-  a  rich  intellectual  and  professional  life. 

out  my  laptop.  I’ve  certainly  not  been  What's  your  secret  to  happiness?  You'd 

without  a  computer  for  that  [length  find  my  wife.  Sigrid,  to  be  extraor- 
of]  time  [before].  I  had  only  my  Black-  dinary.  It  is  she  who  has  been  very 


Net  is  not  all  simple  text.  It's  struc¬ 
tured,  whether  it’s  Microsoft  Word 
documents  or  PDFs.  That  means  the 
information  is  only  really  accessible 
if  you  understand  how  to  interpret 
the  bits.  What  happens  when  files  are 
there  and  we  don’t  know  how  to  inter¬ 
pret  them  anymore? 

How  would  we  loss  that  ability?  If  you 

have  a  CD  but  the  form  isn’t  known 
anymore.  I  have  5 1/4-in.  diskettes,  but 
nothing  to  read  them.  Even  3 1/2-in. 
diskette  readers  are  becoming  hard  to 
come  by.  The  physical  source  media 
change.  We  may  lose  the  ability  to  read 
them.  People  forget  what  they  stored 
on  the  Net.  We  can’t  necessarily  guar¬ 
antee  people  will  upgrade  instances  of 


you  can  do.  I  can  confidently  argue 
that  maybe  only  1%  or  2%  of  the  pos¬ 
sible  applications  have  already  been 
implemented  or  thought  of. 

Where  are  you  with  your  work  on  the 
interplanetary  Internet?  The  interplan¬ 
etary  work  was  started  at  [NASA’s  Jet 
Propulsion  Laboratory]  in  1998.  We 
wanted  to  standardize  space  com¬ 
munications.  We  quickly  discovered 
that  the  basic  TCP/IP  protocols  would 
work  on  the  surface  of  a  planet  or  in 
a  spacecraft,  but  they  don't  work  well 
when  speaking  on  an  interplanetary 
’  basis.  The  space  between  planets  is  so 
big.  Between  Earth  and  Mars,  it  takes 
20  minutes  one  way  and  40  minutes 
round-trip  for  a  radio  signal  to  propa¬ 
gate  between  planets.  Forty  minutes  is 
way  long. 

Delay  and  disruption  [tolerant]  net¬ 
working  protocols  are  implemented  and 
developed.  They’re  available  in  open 
source  and  being  tested  in  near  space. 


bots  that  i 


For  you,  it’s  a  problem  you  didn’t  see  coming 

For  your  business,  it’s  a  customer 
you  won’t  see  coming  back. 


Liebert  flexibility 


EMERSON 

Network  Power 


EMERSON.  CONSIDER  IT  SOLVED. 


This  is  Tech  Dispenser.  Unlike  bot-powered  blog  networks,  we  have  actual 
human  beings  picking  and  choosing  which  IT  blogs  are  the  most  interesting. 
Every  piece  of  content  that  appears  on  Techdispenser.com  is  selected^ 
Computerworid  editors  and  categorized  for  easy  access.  With  over  80  IT 
blogs  in  our  growing  network,  we’ve  created  a  one-stop  shop  so  you  can  see 
what  the  top  bloggers  on  the  Web  are  saying  each  week. 

www.techdispenser.com 
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Virginia  Robbins 


Finding,  Keeping 
The  Best  Vendors 


to  that  profile,  the  easier 
and  cheaper  things  will  be 
for  you. 


you,  the  more  it  will  be 

RECENTLY  FINISHED  a  project  that  included  34  ven-  willin8 change  its  proc- 
dors,  ranging  from  the  best  I’ve  worked  with  to  the  very  ^d* yOU. 
worst.  So,  the  questions  that  have  been  on  my  mind  are  Sometimes  a  smaller  ven- 

how  to  go  about  forming  good  vendor  relationships  and  because  it  needs  your  busi- 

how  to  select  the  best  vendors.  Here  is  what  I’ve  learned:  ness:  other  times’ a  larger 

vendor  is  looking  to  add  a 

■  Price  alone  doesn't  mat-  |  a  certain  member  of  the  |  more  likely  that  the  ven-  customer  to  its  reference 

ter.  Sometimes  I've  gone  staff,  only  to  find  out  that  dor  can  easily  meet  your  list  that  is  just  like  you. 

with  the  most  expensive  he  wouldn’t  be  assigned  needs.  My  best  vendors 

vendor,  only  to  find  that  to  my  account.  I’ve  signed  specialize  in  my  industry  Once  you’ve  found  a 


muon  m  _  _  .  vendor  tor  as  long  as  you 

■s.  The  closer  your  ■  The  ClOSer  yOU  want.  ■ 

match  those  of  the  are  to  the  profile  Virginia  Robbins  is  a/ormer 

r’s  average  customer,  .<  _  wenflnrV  nrp_  C/O  who  is  currently  the 

sier  the  relation-  -  .  '  chief  administrative  officer 


vendor  by  talking  to  their  vendor’s  average  customer,  Qf  _  ■y-J.-i.  ____  CIO  who  is  currently  the 

references,  no  matter  how  the  easier  the  relation-  V" a  •"  ®  chief  administrative  officer 

many  questions  I  ask.  ship  will  be.  Identify  that  fBITed  CUStOmeT,  responsible  for  technology 

■  History  doesn't  matter.  average  customer,  and  the  CaSteT  afld  and  bank  operations  at  the 

I  have  contracted  with  then  compare  its  needs  to  rhftJimr  thinnc  California  Bank  of  Corn- 

vendors  because  everyone  yours.  If  you  have  a  match  WIWa|Jer  UiinjfS  merce.  You  can  contact  her 


I  higher  than  80%.  then  it’s  I  Will  be  for  YOU. 


Welcome  to  the  ICE  age 


New  steps  are  needed  to  attract  entry-level  I', 
but  IT  managers  are  slow  to  try  Web  2.0  tool; 


VITAL  SIGNS  COVER  STORY  I 


IN  MID-MAY,  Hewlett-Packard  Co. par¬ 
ticipated  in  a  virtual  job  fair  using  Second 
Life  tools  from  Linden  Lab  in  San  Francisco. 
HP  had  been  invited  by  one  of  its  external 
recruiters,  TMP  Worldwide  Advertising  & 
Communications  LLC  in  New  York.  During 
the  virtual  event,  recruiters  and  job  appli¬ 
cants  alike  created  avatars,  or  personas  to  represent 
themselves  in  the  virtual  world. 


At  least  that's  how  it  was  supposed 
to  unfold.  Four  HP  recruiters  were 
slated  to  spend  four  hours  a  day  on  the 
site  for  three  consecutive  days  to  inter¬ 
view  40-plus  applicants.  Fewer  than  20 
avatars  showed  up,  however. 

“Some  candidates  who  didn’t  show 
turned  out  to  be  inexperienced  with 
[Second  Life],  didn’t  have  their  avatars 
created  in  time  or  weren’t  interested,” 
says  Betty  Smith,  manager  of  universi¬ 
ty  recruiting  for  HP  in  San  Diego.  TWo 
of  those  who  did  take  part  warranted 
follow-up  interviews,  though  HP  hasn’t 

extended  job  offers  to  either  candidate 

yet,  she  says. 

HP’s  willingness  to  step  into  the 
Web  2.0  world  for  recruiting  differenti¬ 
ates  the  company.  In  Computerworld’s 
latest  Vital  Signs  survey,  none  of  the 
233  IT  professionals  responding  re¬ 
ported  using  Second  Life  for  recruit¬ 
ing.  A  scant  4%  said  they  used  blogs  or 
social  networking  sites  like  Facebook 
to  engage  potential  IT  job  candidates. 
And  only  15%  reported  using  profes- 


Kwecan 
find  a  way  to 
add  value,  theyll 
think  about  HP  as  a 
company  that  thinks 
about  them. 

BETTY  SMITH.  MANAGER 
OF  UNIVERSITY  RECRUITING. 
HEWLETT-PACKARD  CO. 

sional  networking  sites  such  as  Linked- 
In.  Moreover,  52%  of  the  respondents 
said  they  don’t  use  any  Web  2.0  tools 
for  recruiting. 

It  seems  that  most  IT  organizations 
are  missing  out  on  a  huge  opportunity 
to  connect  —  particularly  with  the  tal¬ 
ented  twentysomethings  who  inhabit 
the  virtual  world.  These  Gen  Yers  are 
“tribal"  and  accustomed  to  the  “very 
collaborative  relationships”  that  Web 
2.0  tools  enable,  sdys  Tom  Casey,  senior 
vice  president  and  workforce  trans¬ 


formation  leader  at  Kingwood,  Texas- 
based  consultancy  BSG  Concours. 

But  a  few  companies  do  see  the 
potential.  The  IT  leadership  team  at 
Quicken  Loans  Inc.,  for  example,  is 
ahead  of  the  curve.  In  February,  it 
rolled  out  a  recruiting  Web  site  that 
includes  a  blog  called  “The  Diff”  (ad¬ 
dressing  the  gap  between  average  and 
outstanding  performance),  which  em¬ 
ployees  use  to  articulate  why  Quicken 
Loans  is  such  a  great  company  to  work 
for.  One  of  the  chief  benefits  of  the 
blog  ( www.whatsthediff.com )  is  that  it 
helps  company  workers  connect  with 
potential  employees  in  a  genuine  way, 
says  e-commerce  marketing  director 
Matt  Cardwell. 

So  far,  more  than  half  of  the  blog 
posts  discuss  what’s  cool  about  work¬ 
ing  for  the  online  mortgage  lender; 
the  others  highlight  external  people 
or  companies  that  Quicken  Loans  em- . 
ployees  admire.  “It's  about  connecting 
people  up,”  says  Cardwell. 


The  use  of  Web  2.0  tools  can  help  job 

hunters  screen  companies  and  vice  ver¬ 

sa.  It  starts  with  a  well-designed  Web 
site  that  enables  potential  employees  to 
learn  nearly  everything  about  a  com¬ 
pany,  including  its  ethics  and  culture 
—  which  helps  socially  conscious  job 
candidates  make  informed  decisions 
about  pursuing  IT  employment. 

Other  tools  can  help  companies  sepa¬ 
rate  the  likely  hires  from  the  rest.  Wall 
Homes  Inc,  an  Arlington,  Texas-based 
home  builder,  typically  receives  thou- 


(workers  and  retain  retirement-age  staffers, 
that  could  help.  By  Thomas  Hoffman 


in  several  respects.  For  instance,  many 
twentysomethings  are  accustomed  to 
receiving  a  lot  of  handhoiding  and  atta- 
boys,  says  Adrian  Gostick.  co-author  of 
The  Carrot  Principle  (Free  Press,  2007) 
and  a  consultant  at  O.C.  Tanner  Co.,  an 


Are  you  taking  any  steps 
to  retain  IT  pros  who 
are  nearing  traditional 
retirement  age? 


■  COVER  STORY  VITAL  SIGNS 


way  to  reach  out  where  they’re  already  ;  grants  IT  staffers  flexible  hours  and 
comfortable,”  says  Smith.  “If  we  can  ;  equips  them  with  home  PCs  and  Blacl 

And  a  way  to  add  value,  they'll  think  !  Berries  so  they  can  do  their  jobs  when 
about  HP  as  a  company  that  ever  and  wherever  they’re 

thinks  about  them."  |fg  ahnilf  able.  “There’s  no  question 

Of  course,  Web  2.0  is  connect-  y°u’re  going to  get  the  re~ 


“There  is  no  company  I  MATT  CARDWELL.  And  he  does.  Many 

have  spoken  to  that  has  n,BFrTnEBRnnir^IS|Tn»vc;  younger  workers  on 

cracked  the  DaVinci  Code  "”!“[{ THE  COMPANY'S  Temares’ 300-person  IT 

ofattraction,”hesays.  BLOB-ASSISTED  staff  put  in  an  eight-hour 

And  new  IT  recruits  are  RECRUITIN6  WEB  SITE  day  and  then  grind  out 

more  difficult  to  land.  In  the  another  four  hours  over- 

Vital  Signs  survey,  27%  of  respondents  .  night.  In  fact,  the  university  now  posts 
said  it's  tougher  to  recruit  college  grad-  j  notices  about  server  downtime  at  least 


Salt  Lake  City. 

The  wants  and  needs  of  this  new 
generation  can  induce  managerial 
headaches  for  IT  leaders  who  hire  the 
wrong  candidates.  “We’ve  cut  the  [IT] 
workforce  down  in  the  last  10  years  to 
make  them  more  efficient,”  says  Neal 
Ganguly,  CIO  at  CentraState  Health¬ 
care  System,  a  Freehold,  N.J.-based 
health  care  provider  with  a  32-person 
IT  staff.  “One  person  who  is  too  needy 
can  drag  the  whole  workforce  dowa 


Canaan,  Conn.  Such  visits  give  students 
a  chance  to  quiz  IT  leaders  about  what 
it’s  really  like  to  work  at  a  company, 
says  Foote.  “It’s  consistently  the  best 
way  to  hire  people  out  of  school.” 

Tellabs  Inc.  CIO  Jean  Holley  has 
used  that  technique.  To  help  feed  an 
internship  program  for  college  gradu¬ 
ates  with  SAP,  life-cycle  development 
and  broad-based  Web  skills,  Holley  and 
two  colleagues  visited  the  University  of 
Missouri  -  Rolla  in  March  to  conduct 


now  tools  or  methods  to 
find  and  recruit  recant 
college  grads  for  IT? 


Microsoft 


MICROSOFT  SYSTEM  CENTER.  DESIGNED  FOR  BIG 


System  Center 


Rhumba 

THOUSANDS  ol  baby  boomer  rT 


I  and  threatening  to  take  decades 
of  valuable  insights  about  proprietary  IT 
operations  with  them  as  they  leave. 

But  most  IT  leaders  either  aren't  paying 
heed  to  the  warning  signs,  or  they  seem 
to  believe  that  the  inevitable  is  still  years 
away  from  affecting  them  or  their  IT  shops. 

In  Computermrid's  latest  Vital  Signs 
survey,  60%  of  the  233  respondents  said 
their  organizations  haven't  taken  any  steps 
to  keep  retirement-age  IT 
workers  from  waltzing  out  Ymi 

thedoor 

At  Hilton  Hotels  Corp  .  .  nave  a 

"we  don't  have  a  looming  project  manage 

concern  in  the  next  five  to  NEAL  OANOULY,  CIO. 


tion  among  the  company's 
650  IT  workers  worldwide,  says  Laurel 
Bailey,  a  spokeswoman  for  the  hotel  chain's 
technology  group  in  Memphis.  "After  that, 
we  may  need  to  start  looking  at  it." 

In  fact,  some  companies  may  see 
impending  retirements  as  a  good  thing. 
Many  retirement-age  IT  workers  "are  be¬ 
ing  pushed  out  the  door  because  the  CFO 
doesn't  want  to  carry  their  high  salaries." 
says  David  Foote,  chief  research  officer  at 
Foote  Partners. 

But  some  IT  managers  are  taking  the 
threat  of  an  IT  brain  drain  seriously.  In  the 
Vital  Signs  survey.  19%  of  respondents 
said  they've  established  flexible  schedules 
to  accommodate  IT  workers  nearing  an 
exit,  while  12%  said  they've  offered  part- 


One  innovative  technique  is  to  create 
a  division  of  retirement-age  workers 
who  agree  to  become  part-time  subcon¬ 
tractors.  says  Tom  Casey,  senior  vice 
president  and  workforce  transformation 
practice  leader  at  BS6  Concours. 

The  concept,  which  Casey  says  just  a 
handful  of  IT  organizations  have  tried  so 
far,  benefits  employers  and  retirees  alike. 
There  are  recruitment,  hiring  and  training 
savings  for  companies  that  retain  perform¬ 
ers  they  know  and  trust  who  can  gradually 
transfer  their  knowledge  to  others. 

The  benefit  to  retirees:  "They  can  contin¬ 
ue  to  do  something  they 
love"  while  also  pursuing 


Casey  adds. 

But  such  programs 
require  careful  attention. 
CENTRASTATE  HEALTHCARE  "You  still  have  to  manage 
those  employees."  says 
Stephen  Pickett.  CIO  at  Penske  Corp.  in 
Bloomfield  Hills.  Mich.  ‘I  would  think  most 
organizations  would  want  an  outsourcer  to 
manage  those  employees." 

Neal  Ganguly,  CIO  at  CentraState  Health¬ 
care,  says  he  would  consider  forming  a  di¬ 
vision  of  retirement-age  IT  subcontractors, 
with  the  expectation  that  the  older  workers 
would  be  phased  out  over  time.  But  that 
wouldn't  work  in  all  scenarios  and  jobs, 
he  says.  For  instance,  an  older  IT  project 
manager  was  recently  unsuccessful  in  his 
bid  to  work  part-time  at  CentraState  rather 
than  retire.  "We  needed  someone  full 
time."  says  Ganguly.  "You  can't  have  a  .5 
project  manager." 

-  THOMAS  HOFFMAN 


by10%):8%  —I 


What  do  you  expect 
will  be  your  biggest 
management  challenge  in 
the  next  three  months? 

Top  five  responses: 

Budget  constraints  21% 

Managing  projects  18% 

Data  security/privacy  9% 

ktara^ngfdeveloping  ^ 

Regulatory  compliance  6% 

ITgovemance  8% 


What  changes  do 
you  expect  in  your  IT 
head  count  in  the  next 
three  months? 


■  COVER  STORY  I  VITAL  SIGNS 


company’s  Web  !  growing  or  dyinj 
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THOUSANDS  of  baby  boomer  IT 
I  workers  are  nearing  retirement  age 
I  and  threatening  to  take  decades 
of  valuable  insights  about  proprietary  IT 
operations  with  them  as  they  leave. 


One  innovative  technique  is  to  create 
a  division  of  retirement-age  workers 
who  agree  to  become  part-time  subcon¬ 
tractors,  says  Tom  Casey,  senior  vice 
president  and  workforce  transformation 
practice  leader  at  BS6  Concours. 

Theconcept,whichCaseysaysjusta 


But  most  IT  leaders  either  aren't  paying  handful  of  IT  organizations  have  tried  so 


heed  tothewarningsigns.orthey  seem 
to  believe  that  the  inevitable  is  stiH  years 
away  from  affecting  them  or  their  IT  shops. 
In  Computerworld’s  latest  Vital  Signs 


it,  benefits  employers  and  retirees  alike, 
here  are  recruitment,  hiring  and  training 
strings  for  companies  that  retain  perform- 
rs  they  know  and  trust  who  can  gradually 


ue  to  do  something  they 
love"  while  also  pursuing 
their  retirement  interests. 


to  keep  retirement-age  IT  ueto  do  something  they 

workers  from  waltzing  out  You  Can’t  love"  while  also  pursuing 

thedoor.  ill™  „  K  their  retirement  interests. 

At  Hilton  Hotels  Corp..  .  MVe  a  .3  Casey  adds. 

‘we  don't  have  a  looming  project  manager.  But  such  programs 

concern  in  the  next  five  to  NEAL  OAMOULY,  CIO.  require  caiefal  attention, 

seven  years' about  attri-  CENTRASTATE  HEALTHCARE  ‘You  still  have  to  manage 


Bailey,  a  spokeswoman  for  the  hotel  chain's  Bloomfield  Hills.  Mi 


technology  group  in  Memphis.  ‘After  that, 
we  may  need  to  start  looking  at  it' 

In  fact,  some  companies  may  see 
impending  retirements  as  a  good  thing. 


organizations  would  want  an  outsourcer  to 
manage  those  employees." 

Neal  Ganguly.  CIO  at  CentraState  Health¬ 
care.  says  he  would  consider  forming  a  di- 


says  David  Foote,  chief  research  officer  at  wouldn't  work  in  all  scenarios  and  jobs. 


threat  of  an  IT  brain  drain  seriously.  In  the  bid  to  work  part-time  at  CentraState  rather 


exit,  while  12%  said  they've  offered  part- 


Announcing  a 
breakthrough  in 
automatic  technology 

jgr 


InvisiTaskmg 


as  the  sun  rising,  with  Diskeeper  2007  deployed  your  systems  wi 
use  of  brand-new  InvisiTasking'  technology,  Diskeeper  eliminate! 
REAL  TIME  without  affecting  system  resources  or  intruding  on  ay 


fragmentation  as  it  occurs  providing  maximum  system  performance  at  all  times! 

►  l-FAAST”  2.0  (Intelligent  File  Access  Acceleration  Sequencing  Technology) 
dramatically  increases  file  access  by  up  to  80%  above  and  beyond  the  improvement 
of  defragmentation  alone. 

►  Terabyte  Volume  Engine'  2.0  -  Powerful  defragmentation  for  high-capacity  and 
high-traffic  servers  with  disk  volumes  containing  hundreds  of  thousands  to  millions 
of  files  (e.g.,  NAS,  RAID,  and  SAN).  Also  allows  unobtrusive,  thorough  free  space 
consolidation  on  busy  24/7  servers. 

►  FragShield'  dynamically  prevents  fragmentation  of  critical  system  files,  maintaining 


■  Q&A 


APC’s  Neil 

Rasmussen  is 

on  a  mission 
to  improve  the 
planet,  and  he’s 
not  waiting 
for  industry 
standards. 


"Excellent"  For  Service- 

"The  most  comprehensive  and  easy  to  use  product  on  the  market  today." 

-  InfbWorld  Review,  January 22, 2007 


route  and  not  the  UPS  route.  to  open  that  up  at  the  point  where  oth-  a  sudden,  we  have  a  huge  opportunity 


er  people  can  make  Lego  blocks  that  fit  to  save  a  lot  of  energy,  improve  the 
You  have  a  passion  about  modularized,  onto  our  system.  But  we're  not  going  planet  —  and  we're  leading  it  It’s  just  a 

standardized  data  centers,  right  down  to  sit  back  and  wait  for  the  industry  to  great  time  to  be  in  the  industry.  ■ 


Oriented  Architecture 

Oracle  Fusion  Middleware 

Hot-Pluggable.  Comprehensive. 


ORACLE 


oracle.com/soa 
or  call  1.800.633.0641 


■  SOFTWARE 


Sometimes  tion  to  extend  the  lives  of 
a  system  the  aging  systems  that  host 

just  works.  critical  business  logic. 

Although  But  for  most  users,  these 

analysts  once  applications  aren’t  perma- 

confidently  nent.  The  cost  of  mainte- 

predicted  the  nance  or  changing  business 
death  of  the  mainframe,  it  needs  will  eventually  signal 


Legacy 

sl&rt 

Some  businesses  are  finding 
ways  to  extend  the  longevity 
of  aging  mainframe-based 
systems.  By  Drew  Robb 


the  business  for  a  while,” 
says  George  Hayward,  direc¬ 
tor  of  information  systems. 
“We  didn’t  really  need  new 
guts;  I  just  wanted  to  find  a 
better  way  for  people  to  get 
at  the  data." 

The  company's  1992- 
vintage,  custom-built  ERP/ 
MRP  system  from  Western 
Data  Systems  was  originally 
designed  to  run  on  IBM’s 
MVS/ESA  operating  system, 
which  IBM  stopped  support¬ 
ing  in  1999.  Even  its  succes¬ 
sor,  OS/390,  was  mothballed 
in  2004. 

Instead  of  replacing  the 
mainframe  and  enterprise 
software,  LaBarge  and  oth¬ 
ers  in  similar  positions  are 
finding  innovative  ways  to 
use  middleware,  Web  inter¬ 
faces  and  mainframe  emula- 


and  tweaked,  but  they  are 
still  Cobol  software  running 
on  the  original  operating 
system,”  says  Patrick  Swee¬ 
ney,  ACCC’s  director  of  ad¬ 
ministrative  computing. 

The  school  had  been  run¬ 
ning  these  applications  on 
an  IBM  9221 191,  an  11  MIPS 
mainframe  introduced  in 
1994.  It  runs  IBM’s  Virtual 
Machine  and  VSE  operating 

But  when  it  came  time 
to  plunge  ahead  to  the  next 
series  mainframe,  Sweeney 
balked.  “When  IBM  started 
putting  the  pressure  on  us 
to  go  forward  with  the  new 
zSeries  mainframes,  the 
costs  were  prohibitive  and 
the  jump  in  MIPS  [from  11 
to  80]  was  too  extreme  for 
what  we  needed,”  Sweeney 


■  SECURITY  MANAGER’S  JOURNAL  I  MATHIAS  THURMAN 

lakingalKp 
To  Policy  Hell 

Be  specific  in  your  policies,  our 
manager  learns,  or  users  will  find 

ways  to  skirt  the  letter  of  the  law. 


Hi 


l.  you  can  do 
that;  there  isn’t  a  policy 
in  place”?  I  hear  it  too  of¬ 
ten,  because  I  hate  writ¬ 
ing  policies.  And  I  hate 
writing  policies  because 
at  a  very  engineering- 
centric  company  like 
mine,  generic  policies 
don’t  go  over  well  If  I 
were  to  write  a  policy 
stating,  “No  running 
with  scissors,"  I  would  be 
asked  to  define  “running.” 
How  fast  can  you  walk  be¬ 
fore  it  counts  as  running? 
Does  the  policy  apply  to 
small,  blunt  scissors? 

So,  when  I  write  infor¬ 
mation  security  policies, 
there’s  no  such  thing  as 
being  too  specific.  I  tried 
to  keep  our  acceptable- 
use  policy  fairly  generic, 
not  mentioning  any  spe¬ 
cific  applications  or 
technologies.  Afterward, 
when  I  found  out  that  a 
business  unit  was  using 
Skype,  the  manager  said, 
“Show  me  a  policy  stating 
that  Skype  is  considered 
unacceptable  use.”  He 
argued  that  his  depart¬ 


ment’s  use  of  Skype  was 
saving  the  company 
money  and  increasing 
productivity,  while  I 
countered  that  Skype  is  a 
risky  application.  His  ar¬ 
gument  held  sway  until  I 
rewrote  the  policy  to  call 
out  specific  popular  but 
risky  programs. 

More  recently,  I  wrote 
a  policy  to  ensure  that  all 
devices  on  the  produc¬ 
tion  network  are  properly 
patched.  A  security  as¬ 
sessment  had  demonstrat¬ 
ed  the  immediate  need  for 
such  a  patch  management 
policy.  But  the  network 
manager  pointed  out  that 
in  the  Cisco  world,  de¬ 
vices  don’t  get  “patched” 
—  they  get  a  complete 
IOS  revision.  She  knew 
exactly  what  I  was  refer¬ 
ring  to,  but  she  wanted 
the  policy  to  be  called  the 
“security  software  update 


■  If  I  were  to  write 
a  policy  stating, 
‘No  running  with 
scissors,'  I  would 
be  asked  to  define 


Her  feedback  was 
part  of  our  peer  review 
process.  Although  peer 
reviews  take  more  time 

—  because  you  have 
to  submit  them,  revise 
them  and  resubmit  them 

—  I  like  this  approach. 
For  one  thing,  it  helps 
ensure  that  policies  are 
enforceable.  The  network 
manager  might  note  that 
a  policy’s  wording  would 
require  redesigning  the 
entire  network,  dooming 
the  policy  to  failure. 

Peer  review  also  means 
no  policy  comes  as  a  sur¬ 
prise.  And  the  process 
is  respectful  of  peers.  It 
keeps  me  from  churning 
out  policies  that  generate 
resentment.  Nonethe¬ 
less,  all  that  negotiating 
of  terms  and  content  is 
policy  hell  for  me. 


One  problem  with  poli¬ 
cies  is  that  once  they  are 
published  to  a  Web  site, 
they  languish  until  some¬ 
one  asks,  “Do  we  have 
a  policy  regarding  such 
and  such?”  That  passive 
approach  may  be  fine  for 
many  policies,  but  others 
need  to  be  actively  pro- 


Trouble 

Ticket 

ISSUE:  Writing  policies 
is  a  pain  in  the  neck, 
and  users  too  often 
ignore  them  anyway. 
ACTION  PUN:  Embrace 
the  process,  but  find  a 


moted.  Several  months 
ago,  an  employee  up¬ 
loaded  algorithmic  code 
to  his  Yahoo  “briefcase.” 

In  the  end,  we  couldn’t 
prove  if  the  employee 
knew  that  he  wasn't  sup¬ 
posed  to  transfer  code  to 
a  personal  account  even 
if  his  intention  was,  as  he 
said,  to  work  from  home 
on  the  weekend. 

This  incident  shows 
that  we  need  a  way  for 
employees  to  electroni¬ 
cally  sign  off  after  reading 
important  acceptable-use 
or  intellectual  property 
protection  policies.  Such  a 
tool  would  also  be  a  way 
to  generate  general  se¬ 
curity  awareness.  Video 
might  be  a  particularly 
effective  way  to  make 
our  important  policy 
messages  stick  in  people’s 

I  will  start  the  hunt  for 
vendors  that 
offer  policy  and 
security  train- 
ing,  and  that  abfo  security,  qc 

provide  compli-  |  SShwartfi 


:e  training 


tools,  and  I’ll  report  back 
later  installment. 
Until  then,  it’s  back  to 
policy  hell.  ■ 

This  week’s  journal  is 
written  by  a  real  secu¬ 
rity  manager,  “Mathias 
tan,”  whose  name 
and  employer  have  been 
disguised  for  obvious 
reasons.  Contact  him  at 
mathias_thurman@ 
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■  OPINION 

Paul  M.  Ingevaldson 

Deciding  Which 
Way  to  Decide 

DURING  MY  YEARS  in  the  IT  business,  I  had  the 
privilege  of  working  with  some  of  the  most  intelli¬ 
gent  and  devoted  people  I  have  ever  known.  I  usu¬ 
ally  found  IT  folks  to  be  thoughtful,  insightful  and 
well  meaning.  Generally,  they  put  the  affairs  of  their  company 
ahead  of  their  own  personal  comfort,  as  evidenced  by  then- 


total  commitment  to  re¬ 
solving  problems  —  often 
after  regular  work  hours. 

One  area  that  I  always 
found  lacking  in  IT,  how¬ 
ever,  was  management 


the  role  of  manager  were 
usually  based  on  some  par¬ 
ticular  accomplishment  or 
just  a  vague  feeling  on  the 

part  of  upper  management 

—  seldom  on  hard  empiri¬ 
cal  evidence  of  managerial 
skill  I  think  this  is  com¬ 
mon  in  many  professions. 
As  a  result,  much  manage¬ 
ment  training  is  of  the  on- 
the-job,  seat-of-the-pants 

Thus,  I  thought  I  would 
share  some  personal  ap¬ 
proaches  I  used  when  I 
coached  my  subordinates 
about  how  to  better  per¬ 
form  their  jobs  or  manage 
people.  These  ideas  were 
developed  by  others.  I 
picked  them  up  along  the 
way  and,  unfortunately, 
have  no  idea  where  they 
came  from.  But  they 
worked  for  me,  so  they 
might  work  for  you. 

The  one  I  probably  used 


most  often  is  the  concept 
of  three  decisions.  I  used 
this  to  describe  to  a  new 
subordinate  or  a  new  man¬ 
ager  the  performance  I 
expected,  or  to  guide  some¬ 
one  whose  decision-making 
was  less  than  optimal. 

It  goes  like  this:  Every 
decision  that  you  make 
can  be  categorized  in  one 

of  three  ways  relative  to 

your  boss: 

The  decision  that  you 
make  and  don’t  tell  your  boss 
about  Generally,  you  don't 
tell  the  boss  because  you 
assume  he  has  given  you 
the  implicit  authority  to 
make  the  call  and  isn’t  re¬ 
ally  interested  in  knowing 
about  the  decision. 

In  some  cases,  though, 
you  may  want  to  keep 
the  boss  in  the  dark  as 
to  the  outcome.  This  ap¬ 
proach  can  be  very  risky 
if  the  boss  finds  out  and  is 

■  Every  decision 
that  you  make  can 
be  categorized  in 
one  of  three  ways 
relative  to  your  boss. 


surprised  at  the  decision. 

The  decision  that  you 
make  and  than  tail  your  boss 
about  This  is  a  bit  lower- 
risk,  but  it  also  shows  that 
you  think  you  have  the 
authority  to  make  the 
call.  In  this  case,  you  learn 
very  quickly  whether  you 
do.  If  not,  the  boss  is  usu¬ 
ally  more  understanding, 
since  at  least  you  were 
forthcoming  with  the  in¬ 
formation. 

The  decision  you  tell  your 
boss  about  and  then  you 
make.  This  is  the  lowest- 
risk  type  of  decision,  but 
one  that  also  has  its  down¬ 
side.  If  you  run  to  your 
boss  before  making  every 
decision,  at  some  point  he 
might  wonder  if  you  are 
needed  in  the  job. 

I  would  tell  my  subordi¬ 
nates  that  the  rules  about 
which  type  of  decision  to 
use  change  every  day  and 
in  every  circumstance. 
Which  one  you  select  will 
depend  on  lots  of  intan¬ 
gibles:  the  implications  of 
the  decision,  the  results  of 
a  recent  similar  decision, 
the  current  profitability  of 


the  company,  the  status  of 
the  IT  budget,  the  reputa¬ 
tion  of  the  user  affected, 
the  amount  of  money  in¬ 
volved  —  even  the  mood 
of  the  boss.  You  must 
consider  everything  before 
you  decide  which  way  to 
decide. 

Another  variable  is  the 
level  of  trust  between 
you  and  your  boss.  If  you 
are  new  to  working  for 
this  person,  then  the  pru¬ 
dent  path  is  to  err  on  the 
safe  side  and  clear  most 
decisions  through  him. 
This  way,  you’ll  discover 
whether  you  and  the  boss 
tend  to  be  on  the  same 
wavelength.  As  your  rela¬ 
tionship  grows  and  trust 
develops,  more  and  more 
decisions  can  be  Type  I  or 
Type  II.  The  more  your 
decisions  achieve  positive 
results,  the  more  hands-off 
your  boss  will  be  and  the 
more  freedom  you  will 
have  to  make  your  own 
decisions. 

Even  so,  the  process  is 
never  perfect.  Sometimes 
you’ll  surprise  the  boss, 
and  other  times  you’ll  be 
overly  cautious.  But  if  you 
and  your  boss  have  an 
open  relationship,  a  dis¬ 
cussion  about  the  three  de¬ 
cisions  can  lead  to  a  much 
more  rewarding  experi¬ 
ence.  And  from  the  boss’s 
point  of  view,  this  type  of 
discussion  is  an  excellent 
way  to  grow  and  develop 
management  talent  in  your 
organization.  ■ 

Paul  M.  Ingevaldson  retired 
as  CIO  at  Ace  Hardware 
Corp.  in  2004  after  40  years 
in  the  IT  business.  Contact 
him  at  ingepi@aol.com. 
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>»  HOW  U.S.  COLLEGES 
AND  UNIVERSITIES  ARE 
WORKING  WITH  THE  PRIVATE 
SECTOR  TO  DEVELOP  NEXT- 
GENERATION  IT  LEADERS 
At  the  University  of  Michigan.  IT 
industry  executives  recently  recom¬ 
mended  placing  mote  emphasis  on 
student  development  in  areas  such 
as  protect  management  and  leader¬ 
ship  development.  says  C.  Olivia 
Frost,  interim  dean  of  the  School 


development,  deployment  and  op-  I  -connects  l 
eratrons  will  grow.  Technology  use  -  the  virtual  w 
in  the  world  ol  business  technology  '  RFID  chips; 


i  physical  \ 


Other  feedback  from  the  private 
lector  has  led  to  the  development 
if  master's  specializations  such 
is  social  computing,  which  was 


The  Google 


training  to  develop" 


management,  this  includes  teaching 
students  how  to  work  with  people 
with  different  skills  and  areas  ol 
specialization  on  a  project  team. 

Students  "need  to  learn  how  to 
work  well  with  people  with  differ¬ 
ent  backgrounds."  says  Frost. 

Employers  also  want  entry-level 
IT  workers  who  have  strong  com¬ 


used  to  advise  consumers  on  things 
like  movies  and  restaurants.  An¬ 
other  area  of  concentration  is  social 
network  analysis  -  determining  how 
networks  of  people  form  around 
technology  "pools."  says  Frost 


izatlon  Is  community  informatics, 
which  focuses  on  using  technol¬ 
ogy  to  serve  underprivileged 
communities. 

-  THOMAS  HOFFMAN 


,."Wetrytorecr 
nts]  with  those 


m 


m  i|wA 

Bobby  Cameron 

the  Forrester 


Research  analyst 
talks  about  the  future 
of  IT  careers. 


IT  suffers  will  know  lass, 
with  as  fow  as  20%  of  them 
having  IT  skills  within  the 

run  an  IT  department  with  a 
staff  of  nontechies?  This  is  all 
about  outsourcing  -  either  directly 
through  contracts  between  IT  and 
a  provider  or  indirectly  through 
BPO  [business  process  outsourc¬ 
ing]  and  [software  as  a  service]. 
The  techies  that  IT  will  need  to 
keep  are  architects  and  DBAs.  The 
balance  are  project  managers, 
business  analysts.  IT-business 
relationship  managers  and  vendor 
managers.  I  suspect  the  average 
of  IT  staffers  with  deep  IT  skills  will 
hover  in  the  30%  to  40%  range, 
because  some  firms  will  want  to 
own  as  much  of  the  technology  skill 
set  as  they  can.  And  while  IT  shops 
will  get  smaller,  the  total  number 
of  people  engaged  in  technology 
development,  deployment  and  op¬ 
erations  will  grow.  Technology  use 
in  the  world  of  business  technology 
will  explode,  with  many  of  the  roles 


viders  and  outsourcers. 

CEOs  are  going  to  know  more 
about  the  application  of  technol¬ 
ogy  -  about  the  business  results 
of  technology  use  -  much  as  they 
understand  manufacturing,  engi¬ 
neering.  or  sales  and  marketing. 
But  no  CEO  is  about  to  understand 
SAN  tuning  or  JavaBeans. 

You  talked  about  moving  “IT 
cowboys"  out  to  the  fringes. 
Where  is  that,  exactly?  The 

fringes  are  the  edges  of  the  tech¬ 
nology  stack,  where  competitive 
differentiation  is  created.  In  one  di¬ 
mension,  using  the  seven-layer  ISO 
technology  stack,  the  fringe  is  the 
very  top  layer  of  the  applications 

-  like  above  the  [service-oriented 
architecture]  interfaces,  where 
new  business  models  are  experi¬ 
mented  with.  In  another  dimension, 
the  fringe  is  at  the  edge  of  the 
network  where  the  X  Internet  -  the 
extended  and  executable  Internet 

-  connects  the  physical  world  with 
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Diversity  Spotlight: 


Issue  Date:  August  6 

For  40  years,  Computer- 
world  has  been  the  most 
trusted  source  for  news 
with  a  broad  analytical 
view  of  how  that  news  af¬ 
fects  technology  profes¬ 
sionals’  jobs. 

This  highly  anticipated  is¬ 
sue  is  the  perfect  venue  to 
highlight  career  opportu¬ 
nities  at  your  organization. 
Read  by  over  1,400,000 
qualified  IT  professionals, 
C.omputerworld  will  put 
your  recruitment  message 
in  front  of  the  talent  you 
need  to  reach. 

National  and  regional  print 
advertising  opportuni¬ 
ties  are  available.  Print, 
job  postings,  banners, 
e-newsletters  and  more. 

Call  for  details! 

For  more  information,  please  contact 
Laura  Wilkinson  at  847-441-8877 
or  laura_wilkinson@itcareers.net 


SharkTank 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 


Chain  of  Demand 

Marine  Corps  pilot  fish  gets 
his  first  assignment  at  this 
mil-spec  data  center:  Vacuum 
the  floor.  Fish  knows  how  to 


he's  not  sure  where  to  find 
an  electrical  outlet  to  use.  “I 
didn't  want  to  wander  around 
looking  lost,  so  I  asked  my 
sergeant,  who  I  later  learned 
was  an  idiot,  where  I  could 
plug  it  in.*  says  hsh.  “He 
grabbed  a  tile  puller,  raised  up 


me  to  plug  into  the  only  open 


quiet  as  all  23  servers  turned 
off  at  the  same  time.  Ap¬ 
parently.  UPSs  were  not  a 
priority  before  I  got  there. 


To  say  the  least,  there  wc 


That  afternoon,  UPSs  were 
ordered,  and  we  were  all  told 
to  only  plug  into  outlets  that 
were  above  the  floor." 


the  program  ran."  says  hsh. 
“I  know  now  this  isn't  a  good 
way  to  do  this,  but  at  the  time 
-the  early  1990s -it  was 
pretty  standard  practice." 


why  hsh  hasn't  documented 


one  named  DELETE.ME. 

The  Wonderful 
World  Of  Physics 

User  keeps  requesting  a 
newer,  lighter  laptop.  It's  not 
in  the  budget  for  this  year,  but 


says  a  pilot  hsh  on  the  scene. 
“One  day  while  I  was  setting 
up  his  e-tnail  synchroniza¬ 
tion,  he  actually  asked  me. 

'HI  delete  some  of  these 
e-mails,  will  my  laptop  get  any 
lighter?' "hsh  reports.  “I  had 
to  explain  to  him  that  HdUnt 
work  that  way.  but  I  was  nice 
enough  not  to  mention  that 
the  SO  pounds  of  paper  in  his 
laptop  bag  might  solve  the 


Just  That  Much 

It's  the  eariy  1980s.  and 
these  two  IT  groups  have 
spent  a  week  reviewing  their 
software,  trying  to  figure  out 


which  side  has  the  problem 


decided  to  follow  the  cable 


‘Four  feet  from  the  server, 
the  cable  ran  under  the  fine 
printer's  paper  catcher.  He 


group  to  lift  it  Both  discov- 

each  other  -  about  an  inch 
apart." 

■  Connect  with  Sharky. 
Transmit  y our  true  tale  of 
IT  life  to  me  at  sharky@ 
computervmrld.com,  and 
I’ll  send  you  a  stylish  Shark 
shirt  if  I  use  it. 


0  CHECK  OUT  Shaky's  blog,  brow*  d* 
,  Sharkjves  and  son  up  IwShaik  Tank  home 


I  FRANKLY  SPEAKING 


Frank  Haves 


What,  IT  Worry? 


LAST  TUESDAY,  Craigslist  vanished  from  the  Inter¬ 
net.  So  did  Livejoumal  and  Technorati.  CNET.com 
and  Second  Life  were  reportedly  gone  for  a  while  too. 
What  happened?  The  data  center  they  all  shared 
went  dark  because  of  a  power  failure.  Simple  enough,  right? 
Except  that  the  main  point  of  using  that  data  center  was  so 
they’d  never  have  to  worry  about  power  failures. 


feature  of  365  Main,  the 


rs  manually. 


plan  for  everything.  They 


outsourcers  —  that’s  the 
wrong  move. 

We  have  to  believe 
they’ll  do  their  best.  Other¬ 
wise,  we  shouldn’t  be  do¬ 
ing  business  with  them. 
But  we  also  have  to  know 
that  they’re  not  perfect,  no 
matter  what  their  brightly 
colored  brochures  say. 

We  can  hand  off  work, 
but  we  can’t  hand  off  re¬ 
sponsibility  for  our  com¬ 
pany’s  IT  functions.  That’s 
still  ours. 

Which  means  we  can’t 
outsource  sleepless  nights. 
We  can’t  quit  develop- 


external  electric  power 
started  fluctuating  wildly. 
A  nearby  underground 
transformer  exploded. 
Power  went  out  for  a  large 
section  of  downtown  San 
Francisco,  including  the 
Financial  District  —  up  to 
50,000  customers  in  all. 

And  for  reasons  that  365 
Main  is  still  investigating, 
some  of  its  backup  genera¬ 
tors  didn’t  fire  up  as  they 
should  have.  It  took  about 
45  minutes  for  on-site  en- 


accept  some  hard  reality. 

Bad  things  happen. 
They  happen  no  matter 
how  carefully  we  plan  for 


■  Collocation  and 
outsourcing  don’t 
work  -  at  least  not 
if  what  we  expect 
them  to  do  is  solve 
our  business  conti¬ 
nuity  probloms. 


plan  accordingly. 

That's  true  even  if  a 
company  like  365  Main 
brags  that  its  power  can’t 
go  down.  It  can.  Murphy 
willing,  it  wilL  And  noth¬ 
ing  365  Main  does  after  the 
fact  can  make  whole  the 
lost  sales,  lost  customers 
and  lost  confidence  that 
come  in  the  wake  of  that 
failed  boast. 

So,  is  outsourcing  al¬ 
ways  the  wrong  move? 

Of  course  not.  Trusting 


But  after  two  years 
without  a  glitch  in  San 
Francisco,  365  Main  issued 
a  press  release  announc¬ 
ing  that  RedEnvelope  had 
shuttered  the  Ohio  facility. 

That  was  Tuesday 
morning.  That  afternoon, 
RedEnvelope  was  offline.  ■ 
Frank  Hayas  is  Computer- 
world’s  senior  news  col¬ 
umnist  Contact  him  at 
frank_hayes@ 
computerworld.com. 
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they  get  SOL  Anywhere. 


Ready  to  get  serious  about  bringing  enterprise  database  power  to  your  application?  When  leading  ISVs  like  Intuit 
and  Cerner  BeyondNow  and  12,000  other  customers  look  to  power  their  solutions,  they  choose  the  strength  of 
SQL  Anywhere.  By  embedding  SQL  Anywhere  into  your  server,  desktop  and  mobile  applications,  you  can  lower 
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deployed  licenses,  you  can  trust  that  SQL  Anywhere  has  the  functionality  and  scalability  needed  to  power  your 
application,  regardless  of  whether  your  customers  have  an  on-site  DBA  or  not.  So  if  you're  ready  to  get  serious  about 
embedding  a  database,  learn  how  SQL  Anywhere  can  deliver  some  serious  results  at  www.sqlanywhere.com/cw 
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